- cypherpunks - lists.cpunks.org

Re: [tor-talk] [Cryptography] Dark Web should really be called the Twilight Web
by grarpamp 30 May '15

30 May '15

On Fri, May 29, 2015 at 7:02 PM, Ryan Carboni <ryacko(a)gmail.com> wrote: >> >> That's only if you choose to attempt a padding-across-the-net >> management scope, which is also going to be hard and slow to >> manage and respond to bandwidth and other net dynamics. >> (Though this was about GPA, it's probably also vulnerable to >> endpoint interruption attacks that monitor your stream, unless >> someone is there making up the padding slack at the far end.) >> A wide scope seems hard in a low latency demand based net. >> I'd suggest examining some form of next-hop, next-peer, or link >> local padding scope negotiated with such peers. If you or your >> peers get hit with demand, your negotiation distance is shorter. >> > > That would still leak additional information, to a lesser extent. Passive adversaries see only encrypted traffic, not internal wheat/chaff ratios. (If considering active adversaries, which this is not meant to defend against, to be involved in ratios they would have to run enough nodes to be over half the full path, no worse than basic entry to exit correlation today.) > Regardless, I don't think the TOR network has the bandwidth or Internet access is generally provisioned and billed as... choose the max bandwidth you want, pay for it whether you use it or not. Therefore if you have idle capacity within your max at some moment, you have the bandwidth to dynamically fill it with padding at no additional cost. It's not a question of buying more to use as fill, it's about intelligently filling what you've already comfortably paid for. The problem of observing when endpoints are sitting idle, or rx/tx, and how much, often, etc... applies to any network today, not just tor. > computational capacity for padding. It doesn't take a supercomputer to calculate this regarding your logical link to your next hop node... 100Mbps cap - 63Mbps used = 37Mbps fill > It'd require more bookkeeping. That's head in sand talk, of course nothing is free. Mostly bookkeeping autonomously on and by the local node. Maybe some circuit signaling / publishing to DHT. Seems to get more complex if you try to scope it across the net instead of just to your next hops. There were threads on the subject of fill traffic a few months back that might be worth reading... "high latency hidden services" "traffic analysis" "traffic analysis -> let's write an RFC?"

1 0

Darryl W. Perry Calls for Ross Ulbrich to be Pardoned.
by jim bell 29 May '15

29 May '15

From: http://www.independentpoliticalreport.com/2015/05/darryl-w-perry-calls-for-… Darryl W. Perry Calls for Ross Ulbricht to Be Pardoned Ross UlbrichtFrom Darryl W. Perry’s 2016 presidential campaign website:In 2013 Ross Ulbricht was arrested for allegedly operating the black market website Silk Road. In early 2015 he was found convicted in what was essentially a kangaroo trial, where his attorney was prevented from presenting evidence of government corruption in the case, because of an ongoing investigation. Two of the federal agents investigating the case have since been arrested for fraud and money laundering.Ulbricht’s lead defense attorney Joshua Dratel wrote in a court filing, “In contrast to the government’s portrayal of the Silk Road web site as a more dangerous version of a traditional drug marketplace, in fact the Silk Road web site was in many respects the most responsible such marketplace in history, and consciously and deliberately included recognized harm reduction measures, including access to physician counseling. In addition, transactions on the Silk Road web site were significantly safer than traditional illegal drug purchases, and included quality control and accountability features that made purchasers substantially safer than they were when purchasing drugs in a conventional manner.”Meghan Ralston, a former harm reduction manager for the Drug Policy Alliance says Silk Roadwas “a peaceable alternative to the often deadly violence so commonly associated with the global drug war, and street drug transactions, in particular.”Despite the improprieties in the investigation and the trial, and despite the fact that Ross Ulbricht actually made the black market safer, he will be in prison for a minimum of 20 years. The Ulbricht family has said they plan to appeal the conviction, however they shouldn’t need to do so. Ross Ulbricht should be pardoned, as should all non-violent drug offenders![end of quote]

1 0

the revolution
by Juan 29 May '15

29 May '15

https://blog.xapo.com/announcing-xapos-advisory-board/ (just in case, yes, the subject is pure sarcasm)

1 0

Re: [cryptome] US World Political Jurisdiction
by Александр 29 May '15

29 May '15

> > http://cryptome.org/2015/05/putin-us-fifa-assange-snowden.htm > On the "FIFA CASE", Douglas Rankine wrote some very important words: > > As international law develops throughout the world, the power of a global > arrest warrant will increase and its jurisdiction and extent and use will > also increase. One awaits the day when it will be used against Russia, > China or India. Switzerland is a small country and although having many > rich and powerful institutions, is falling far behind the big players on > the world scene. Assange, and wiki leaks and reporters and journalists and > whistleblowers all over the world, beware, this doctrine applies not only > to terrorists, child molesters and criminals. Big brother is not only > watching you, but he is recording your every move, and whenever or wherever > you get in his way, he will get you... > It relates to many people on this list. Be aware. Or should I say "be careful"? .

2 1

Of secrets, FOIA, history... and bombs
by grarpamp 29 May '15

29 May '15

http://blog.nuclearsecrecy.com/2015/01/09/oppenheimer-unredacted-part-i/

2 2

Who wants to live forever?
by grarpamp 29 May '15

29 May '15

http://science.slashdot.org/story/15/05/28/2252259/ask-slashdot-what-happen… http://science.slashdot.org/story/15/05/28/0036204/scientists-reverse-aging… https://www.youtube.com/watch?v=I_Qe6yDz1HI

1 0

First they came for your multimedia...
by grarpamp 29 May '15

29 May '15

http://torrentfreak.com/high-court-orders-uk-isps-to-block-ebook-sites-1505… http://libgen.org/ http://en.bookfi.org/ http://freshwap.ws/ http://www.freebookspot.es/ http://ebookee.org/ http://bookre.org/ http://avxhome.se/ The multimedia filesharing hubs don't seem to be putting up much of legal fight on principle. So why do they keep popping up to be whack a mole? When will they shift to anonymizing networks like I2P, Gnunet, Phantom, Tor?

3 3

Re: [cryptome] US World Political Jurisdiction
by BizDevCon 29 May '15

29 May '15

The USA is historically chasing companies and individuals laundering money or paying bribes using "US networks for money transfer" aka SWIFT. One of the most prolific cases with SWIFT was the USA versus the Swiss company ABB. If the USA cannot get a handle they will submit the case back to the country of origin's justice department. On the first look of the FIFA case it shows that it is mostly about South American individuals and multi-national companies â all having ties back to the USA. It is a developing story thoughâ¦ â BizDevCon -------- Original Message -------- Subject: Re: [cryptome] US World Political Jurisdiction Time (GMT): May 29 2015 04:47:21 From: afalex169(a)gmail.com To: cryptome(a)freelists.org, cypherpunks(a)cpunks.org http://cryptome.org/2015/05/putin-us-fifa-assange-snowden.htm On the "FIFA CASE", Douglas Rankine wrote some very important words: As international law develops throughout the world, the power of a global arrest warrant will increase and its jurisdiction and extent and use will also increase. One awaits the day when it will be used against Russia, China or India. Switzerland is a small country and although having many rich and powerful institutions, is falling far behind the big players on the world scene. Assange, and wiki leaks and reporters and journalists and whistleblowers all over the world, beware, this doctrine applies not only to terrorists, child molesters and criminals. Big brother is not only watching you, but he is recording your every move, and whenever or wherever you get in his way, he will get you... It relates to many people on this list. Be aware. Or should I say "be careful"? .

1 0

Privacy Centric Naming of Humans
by grarpamp 28 May '15

28 May '15

The common naming triple of First Middle Last may result in more uniqueness than desired... a life sentence imposed upon you by parents unaware of privacy, databasing, freedom to reassociate, and related issues. What of defense of naming with the minimum number of bits required, in the minimum number of fields required? For example, on that root of all human databases, the typical birth certificate. You could be "a j smith" or "t jones", perhaps even "no name", "a b", or simply "a". Perhaps even numbers or any UTF-8 chars. You could expand, change and interpret them in future daily context as desired or useful, such as "t" to "tom", "tony", "terry". There are metrics to be applied such as "a" being the first in sort order, and "t" being the last character with any common frequency. And flexible phonetics that sound like names such as "d" for "dee", "j" for "jay", "l" for "elle". And where your minimum is less than some state or clerk idea of minimum, useful ambiguity can still be injected with things like gender "pat", "morgan", and shorthand "ed (eddie, edward...)", "jane (janel, janelle, janet...)".

2 2

Re: [Cryptography] Dark Web should really be called the Twilight Web
by grarpamp 28 May '15

28 May '15

On Wed, May 27, 2015 at 11:08 PM, Phillip Hallam-Baker <phill(a)hallambaker.com> wrote: > Tor certainly works for some of its intended uses. If you are in a > repressive state and want to get access to CNN or the like, Tor is your > friend. It isn't going to prevent a police state noticing that you might be > up to some sort of unapproved activity but they won't be able to tell the > difference between a dissident and someone surfing for porn etc. So it is > useful and reduces risk in countries like Iran or Russia. But using it in > North Korea would mean risking a death sentence. > > Where I don't see Tor being remotely safe is trying to operate an online > Drug bazar as a hidden service. I mean seriously guys, cryptography isn't > magic and traffic analysis is a very effective tool. Tor is still going to > help your customers keep their identity secret but it isn't going to stop a > determined law enforcement team with pervasive Internet access tracking down > your server. Not when the hidden service is trying to become a consumer > brand with global reach. > > So I think a change in terminology is needed. It is not just that people are > not taking security precautions due to a false sense of security, some > people are ordering up mob hits because they think they are in a permissive > environment that is accountability free. > > Rather than calling it the dark web, the term Twilight Web seems more > appropriate to me. It is possible to hide but only if you know how and only > among the trees. For whatever part of your threat models above includes global passive adversary watching the input and output points of your network of choice and lining up traffic observations... there is little defense to be taken other than filling your unused capacity with fill traffic. No network to date appears to be developing or using that defense. There have been threads on that within the last year, and even one on making such background fill a part of IEEE for fiber and copper physical links.

3 3